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DETAILED ACTION 

1. Applicant's arguments with respect to claims 1-22 have been considered but are moot in 
view of the new ground(s) of rejection. 

2. Claims 1-22 are presented for examination. 

Claim Rejections - 35 USC §103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

1 . Claims 1-21 are rejected under 35 U.S.C. 103(a) as being unpatentable over Maritzen et 
al. (Maritzen, U.S. Pub. No. US 2002/0073042 Al) in view of Bolle et al. (Bolle, Patent No.: US 
6,819,219 Bl) and Etzel et al. (Etzel, Patent No.: US 6,577,734 Bl). 

2. As per claim 1, a personal digital identifier device (Page 1-2 par. 0032; transaction device 
which has a unique identifier comprising privacy card and digital wallet) for controlling access to 
a computer network, said network comprising a plurality of workstations each having a base unit 
associated therewith, said base unit being configured for wireless communications with said 
personal digital identifier device (Page 19 par. 0250; wireless base station), and said network 
further comprising a central server utilizing a security manager component and network storage 
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(Page 5 par. 0063; TPCH embodied as a secure server for authentication), said security manager 
component associated with a private key and a corresponding public key and a public key 
corresponding to a private key held by said personal digital identifier device (Page 2 par. 0039, 
page 1 1 par. 0157; PKI and private key respectively), said personal digital identifier device being 
lightweight, configured for wearing and/or carrying by a user registered thereto (Page 6 par. 
0082; easy sized carrying privacy card) and comprising: 

(a) a wireless communications component comprising a transceiver for communicating with 
said base unit; (Martizen Fig. 14 and page 17 par. 0023; digital wallet in communication with a 
base unit) 

(b) a biometric acquisition component for obtaining a user's input biometric; (Page 2 par. 
0038, page 19 par. 0251, page 20 par. 0259, fig. 7c, and 21; digital wallet stores users biometric 
information to authenticate a user wirelessly) 

(c) a processor configured for communicating with said transceiver and said biometric 
component and operable for (Page 14 par. [0184-0185], page 8 par. 0103): 

(i) evaluating whether the a template stored corresponds to a master template stored on 
biometric digital representation and generating a matching signal when such a 
correspondence is determined; (Page 2 par. [0038-0043], page 8 par. 0103]; evaluating 
whether the given template corresponds to the master template stored on the digital 
wallet); 
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(iii) producing a digital signature using said private key; (Page 1 1-12 par. [0157-0167]) 
and, 

(iv) verifying, using said public key for said private key associated with said security 
manager component, that the source of an encrypted message ostensibly received from 
said security manager is said security manager component (Page 2 par. 0039); 

(e) a power source; (Page 6 par. 0079; temporary battery, page 7 par. 0091, page 8 par. 0109, 
and fig. 14) and, 

(f) a housing, (Fig. 8) 

said personal digital identifier device being configured for, a digitally signed challenge 
response message following said generating of said matching signal, in response to a challenge 
message received from said security manager component and for transmitting said response 
message (Page 5 par. [0066-0068]), 

Maritzen does not explicitly teach: 

(b) personal digital identifier producing a digital representation thereof; 

(d) secure storage containing said master template of a user's biometric associated 
with said security manager component; and 

said personal digital identifier device being configured to prevent transmission of 
any of said master template of a user's biometric; 

However Bolle discloses generating a digital representation (master biometric template) 
(Bolle Col. 4 lines 53-64, and col. 5 lines 35-39); 
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master biometric template generated locally on the wireless device is stored securely on 
the wireless device locally and master biometric data is never transmitted (Bolle Col. 7 lines 59- 
col. 8 lines 2); 

Therefore it would have been obvious to one having ordinary skill in the art at the time the 
invention was made to employ the teachings of Bolle within the system of Maritzen because it 
would prevent an intruder from accessing biometric data by storing the biometric template 
locally and never transmit the template from the wireless device (Bolle Col. 7 lines 63-65); 

Maritzen and Bolle do not explicitly teach: 

(c) (ii) generating said private key held by said personal digital identifier device and 
said public key corresponding thereto and outputting said generated public key for transmission 
by said transceiver; 

(d) secure storage said generated private key and said public key for said private key; 
(f) personal digital identifier device being configured for producing, using said 

generated private key; 

However Etzel discloses generating a unique device encryption key and related public 
key that is never disclosed externally to another device or entity ("externally unknown") and 
stores the private and public key in local memory (Etzel Col. 1 lines 53-59). 

Therefore it would have been obvious to one having ordinary skill in the art at the time the 
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invention was made to employ the teachings of Etzel within the combination system of Martizen 
and Bolle because it would provide a strong way of controlling and maintaining the secrecy of 
the intelligence used by computers to communicate with one other (Etzel col. 1 lines 43-57); 

As to claim 9, it has similar limitations as claim 1; therefore, it is being rejected under the same 
rationale over Maritzen, Bolle and Etzel. In addition, Martizen teaches: 

B. a base unit associated with said workstation and configured for initiating and 
maintaining wireless communications with said personal digital identifier device, said 
communications extending over an area defined by an envelope associated with said workstation 
(Martizen page 15 par. [0202-0203]; digital wallet and personal computer in wireless 
communication in the same region or LAN); and 

C. a server having access to network storage to authenticate a user that reads on a 
central server having access to network storage and utilizing said security manager component 
and said personal digital identifier device for authenticating said user (Martizen Fig. 17 and page 
2 par. 0039; digital wallet and TPCH authenticating a user). 

As to claim 17, it has similar limitations as claim 9; therefore, it is being rejected under the same 
rationale over Maritzen, Bolle and Etzel. In addition, Martizen teaches: 

(a) on registration of a portable personal digital identifier device to a user, within said 

portable personal digital identifier device: receiving an input biometric of said user (Maritzen 
page 11 par. 0143); 
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(b) transmitting a first signal from a base unit associated with one said workstation to said 
personal digital identifier device and automatically transmitting from said personal digital 
identifier device a response signal establishing communications between said base unit and said 
personal digital identifier device in response to said first signal when said personal digital 
identifier device is within said envelope (Maritzen page 15 par. 0202 and 0206; wireless digital 
wallet in signal communication with personal computer wirelessly); 

(c) receiving at said personal digital identifier device a digitally signed challenge message 
ostensibly from said network security manager component and verifying within said personal 
digital identifier device the origin of said challenge using said public key for said private key 
associated with said security manager component (Maritzen Page 2 par. 0039 and Bolle Fig. 6 
No. 1 and 4); 

(g) permitting said authenticated user to access said computer network through said 
workstation (Maritzen Fig. 17 No. 13). 

As per claims 2 & 10 the combination of Maritzen, Bolle and Etzel teach the subject matter as 
claimed above. In addition Maritzen teaches a personal digital identifier device (system) wherein 
said biometric component includes a transducer (Page 3 par. 0043, page 6 [0080-0085]; 
fingerprint recognition built in the card). 

As per claim 3, the combination of Maritzen, Bolle and Etzel teach the subject matter as claimed 
above. In addition Maritzen teaches personal digital identifier device wherein a response signal is 
automatically transmitted from said transceiver in response to a signal received by said 
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transceiver from one said base unit (Page 7 par. 0091, page 17 par. 0221, page 20 par. 0256, fig. 
21). 



As per claims 4 & 14, the combination of Maritzen, Bolle and Etzel teach the subject matter as 
claimed above. In addition Etzel teaches a personal digital identifier device wherein all data held 
in said secure storage is by itself non-identifiable of said user (Etzel Col. 1 lines 53-59). The 
rational for combining are the same as claim 1 above. 

As per claim 5, the combination of Maritzen, Bolle and Etzel teach the subject matter as claimed 
above. In addition Maritzen teaches a personal digital identifier device wherein said transducer 
comprises a solid state fingerprint sensor (Maritzen Page 3 par. 0043, page 6 par. [0080-0085]). 

As per claim 6, the combination of Maritzen, Bolle and Etzel teach the subject matter as claimed 
above. In addition Maritzen teaches a personal digital identifier device wherein said transceiver 
transmits and receives optical signals (Maritzen Page 8 par. 011 1). 

As per claim 7, the combination of Maritzen, Bolle and Etzel teach the subject matter as claimed 
above. In addition Maritzen teaches a personal digital identifier device wherein said transceiver 
transmits and receives radio frequency signals (Maritzen Page 6 par. 0079-0080). 

As per claim 8, the combination of Maritzen, Bolle and Etzel teach the subject matter as claimed 
above. In addition Maritzen teaches a personal digital identifier device in combination with a 
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device holder wherein said device holder is configured to co-operate with said housing of said 
personal digital identifier device such that said personal digital identifier device is held by said 
holder device when it is appropriately positioned relative to said holder device, said device 
holder comprising a communications connector for communicatively coupling said personal 
digital identifier device directly to one said workstation when said personal digital identifier 
device is held by said device holder (Maritzen Fig. 8, 9a, 9b; digital wallet and privacy card, 
page 1-2 par. 0032, and 0038). 

As per claim 1 1, the combination of Maritzen, Bolle and Etzel teach the subject matter as 
claimed above. In addition Maritzen teaches a security system wherein said workstation is a 
personal computer (Martizen page 15 par. 0202). 

As per claim 12, the combination of Maritzen, Bolle and Etzel teach the subject matter as 
claimed above. In addition Maritzen teaches a security system wherein said base unit regularly 
transmits a first signal to said personal digital identifier device and said personal digital identifier 
device automatically transmits a response signal in response (Maritzen page 1 5 par. [0202-0206] 
and fig. 17; signal transmissions to conduct shopping activity in using wireless digital wallet). 

As per claim 13, the combination of Maritzen, Bolle and Etzel teach the subject matter as 
claimed above. In addition Maritzen teaches a security system comprising a plurality of said 
personal digital identifier devices, a plurality of workstations and a plurality of base units 
wherein a base unit is associated with each said workstation, each said base unit transmitting a 
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polling signal to each said personal digital identifier device within said base unit's associated 
envelope following said base units receipt of said response signal from each said personal digital 
identifier device. (Page 15 par. 0202 and page 11 par. 0152; wireless digital wallets are in 
communication with personal computer in the same region or LAN). 

As per claim 15, the combination of Maritzen, Bolle and Etzel teach the subject matter as 
claimed above. In addition Maritzen teaches a security system wherein said network storage 
includes data identifiable of said user for display on a screen of said workstation when said user's 
personal identification device is located within said envelope (Maritzen Fig. 17 No. 13 and page 
16 par. 0210; secure electronic content distribution is transmitted to the user for display). 

As per claims 16 and 18, the combination of Maritzen, Bolle and Etzel teach the subject matter 
as claimed above. A security system wherein said envelope has a shape and area which are 
configured to encompass those locations proximate to said workstation at which an observer may 
read and/or understand information displayed on a screen of said workstation. (It is inherent to 
have an envelope with shape and area to encompass locations proximate, the examiner points out 
this reference: Gainsboro et al. Pub. No.: US 2001/0036821 Al Fig. 4, Page 6 par. 0058). 

As per claim 19 the combination of Maritzen, Bolle and Etzel teach the subject matter as claimed 
above. Further comprising, following said base unit's receipt of said response signal from said 
personal digital identifier device, transmitting from said base unit a polling signal to said 
personal digital identifier device for determining whether said personal digital identifier device 
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remains located within said base unit's associated envelope (It is well known to send a polling 
signal to the wireless device because it would determine whether the wireless device is within 
the envelope region; the examiner points out: Reed, Patent No.: US 6,754,504 Bl Col. 7 lines 
13-36). 

As per claim 20, the combination of Maritzen, Bolle and Etzel teach the subject matter as 
claimed above. In addition Maritzen teaches further comprising displaying on a screen of said 
workstation data identifying said user when said user is identified. (Maritzen Fig. 17 No. 13 and 
col. 15 par. [0202-0203]; user is authenticated and identified and content is provided to display 
on the users computer). 

As per claim 21, the combination of Maritzen, Bolle and Etzel teach the subject matter as 
claimed above. In addition Maritzen teaches further comprising initially registering said user by 
a registrar in the presence of a guarantor, said registrar and guarantor each being a registered user 
of the computer network and said registrar having access to the computer network and verified 
by said security manager component to have registration privileges, and requiring: that said 
guarantor provide to said security manager component a biometrically digitally signed message 
to authenticate said guarantor and that each of said registrar, guarantor and user remain within 
said envelope during said registering of said user (Maritzen page 2 par. 0039, and fig. 17 No. 13; 
user biometrics is registered and digital wallet is used to authenticate the user and content is 
provided from the network server to the user's PC) 
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3. Claim 22 is rejected under 35 U.S.C. 103(a) as being unpatentable over Maritzen et al. 
(Maritzen, U.S. Pub. No. US 2002/0073042 Al) in view of Bolle et al. (Bolle, Patent No.: US 
6,819,219 Bl) and Etzel et al. (Etzel, Patent No.: US 6,577,734 Bl) and in further view of 
Rydbeck et al. (Rydbeck, Patent No.: US 6,195,564 Bl). 

As per claim 22, the combination of Maritzen, Bolle and Etzel teach the subject matter as 
claimed above. 

Maritzen, Bolle and Etzel do not explicitly teach whereby a policy manager component 
may direct that the screen of said workstation be blanked out when a new personal digital 
identifier device moves to a location within said envelope until such time as the user registered to 
said personal digital identifier device is biometrically identified. 

However Rydbeck discloses a communication device and a wireless device determining 
whether an electronic message is to be transferred by checking the elapsed time and sending a 
paging signal to the wireless device and if the wireless device is not responding to the signal, the 
wireless device returns to the standby state or not activated to transfer message (Rydbeck col. 6 
lines 41-65). 

Therefore it would have been obvious to one having ordinary skill in the art at time the 
invention was made to modify the teachings of Rydbeck within the combination system of 
Maritzen, Bolle and Etzel because it would allow to control access. The base unit checks the if 
the personal digital identifier (pdi) device is responding, if the pdi is not responding the base unit 
transmits data to the network server and the network server would blank user screen (access 
denied signal) until user is biometrically identified. 
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4. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Eleni A Shiferaw whose telephone number is 571-272-3867. The 
examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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